{"id":68636,"url":"https://alion.io/job/pgcareers-senior-detection-engineer-ai-augumented","title":"Senior Detection Engineer (AI-Augumented)","company":{"id":871,"name":"Procter & Gamble","domain":"pg.com","url":"https://alion.io/company/pgcareers","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":108,"ghost_share":0,"stale_share":0.694,"repost_share":0.009,"time_to_fill_p50_days":44,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Warsaw, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":106000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"CI/CD","optional":false},{"name":"Copilot","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-08-21T00:00:00Z","employer_posted_date":"2026-08-21","last_verified_at":"2026-10-27T00:16:20Z","board_verified":true,"closed_at":null,"days_open":67,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":67},"description":"Job Location\nWARSAW PLANT & GOJob Description\nThe Senior Detection Engineer plays a vital role in InfoSec's Cyber Defense Technology team, responsible for building, tuning, and scaling detection capabilities across enterprise SIEM platforms. This role operates at the intersection of detection engineering and AI - using agentic AI tooling and LLM-assisted workflows to accelerate threat detection development, validation, and coverage analysis.\nYou will work within a threat-informed detection pipeline where intelligence drives what we detect, and AI agents assist in rule creation, validation, and optimization. The role is hands-on: writing detection logic, managing detection-as-code via git, collaborating with Threat Intelligence and Threat Hunting teams, and continuously improving alert fidelity.\nHow success looks like\nYour success would be based on operational and project deliverables, which would be reviewed on a quarterly basis. Your manager would provide full-support though continuous mentoring and coaching\nDetection rules you write catch real threats and generate minimal noise\n\nYou measurably improve alert fidelity (TP rate) and reduce SOC case volume\n\nYou operate independently within the detection-as-code workflow (branch → validate → deploy)\n\nYou leverage AI tooling to work faster - not as a research project, but as a daily force multiplier\n\nQuarterly deliverables reviewed with your manager through continuous mentoring and coaching\n\nJob Responsibilities: \nDetection Engineering (Core):\nDesign, build, test, and tune detection rules mapped to MITRE ATT&CK, prioritized by threat intelligence and business risk\n\nWrite detection logic across the SIEM and data lake platforms\n\nManage detection content as code - git-based workflows, PR reviews, CI/CD deployment pipelines\n\nInvestigate and suppress false positives systematically using lookup-based architectures\n\nCollaborate with Threat Hunting and Threat Intelligence teams through structured handover processes (TI→TH→DE pipeline)\n\nMonitor emerging threats and rapidly develop detections for new TTPs, CVEs, and active campaigns\n\nAI-Augmented Detection (Differentiator):\nLeverage AI agents and LLM-assisted workflows to accelerate detection rule development, validation, and coverage analysis\n\nUse and contribute to MCP (Model Context Protocol) tooling that enables AI-assisted detection validation (e.g., querying telemetry, assessing LOLBAS/GTFOBins, checking coverage gaps)\n\nOperate agentic pipelines that triage large rule libraries against live telemetry at scale\n\nApply AI/ML techniques where appropriate for anomaly detection, behavioral analytics, or pattern identification in security datasets\n\nStay current on frontier AI threats (agentic attacks, LLM-assisted exploitation, AI-generated phishing) and translate them into detection opportunities\n\nCollaboration & Operations:\nWork closely with SOC analysts to understand alert quality feedback and drive fidelity improvements\n\nCollaborate with data engineers on telemetry availability, data quality, and log source onboarding\n\nContribute to detection coverage reporting and MITRE ATT&CK posture measurement\n\nDocument detection logic, tuning rationale, and suppression decisions\n\nJob Qualifications\nTechnical Competencies and Experience:\nRequired:\n5+ years in detection engineering, security operations, or threat detection roles\n\nProven experience writing and tuning SIEM detection rules/analytics (correlation rules, scheduled queries, real-time alerts)\n\nStrong understanding of MITRE ATT&CK framework and its application to detection coverage\n\nProficiency in Python for automation, scripting, and tooling\n\nExperience with git-based workflows (branching, PRs, CI/CD) for managing security content\n\nFamiliarity with security log sources: EDR, identity, cloud, network, proxy\n\nStrong analytical skills and ability to distinguish true threats from noise in large datasets\n\nBachelor’s degree in Information Systems, Information Technology (IT), Computer Science, Engineering, or other technical / IT field and / or at least 5+ years of relevant experience.\n\nCertification *Preferred* Requirements: CISSP, CCSP, OSCP, GIAC Certified Detection Analyst (GCDA), GCIA, Relevant certifications in cloud & ML/AI\n\nPreferred:\nExperience with multiple query languages\n\nExperience with detection-as-code practices and YAML-based rule formats (Sigma, custom schemas)\n\nWorking knowledge of AI/LLM capabilities and their security implications - both as detection targets and as engineering tools\n\nExperience with MCP servers, GitHub Copilot, or other AI-assisted development workflows\n\nFamiliarity with SOAR platforms and their integration with detection pipelines\n\nUnderstanding of Kubernetes, cloud-native architectures, and OT/ICS environments\n\nWe offer\nP&G-sized projects and access to world leading IT partners and technologies from Day 1.\n\nWide range of self-development possibilities (training and certifications paths).\n\nCompetitive starting salary and benefits program (private health care, P&G stock, saving plans, sport cards).\n\nRegular salary increases and possible promotions - in line with your results and performance.\n\nOpportunity to change role every few years to be in the best place for you and best for P&G.\n\nAt Procter & Gamble we embrace a hybrid work model that combines the flexibility of remote work with the collaborative benefits of in-office engagement. Employees can enjoy the option to work from home two days a week while also spending time in the office to foster teamwork and enhance communication.\nWatch this video to learn more about our full recruiting process: https://www.youtube.com/watch?v=0bicvbpy0gI\nKindly be advised that at P&G, employment is exclusively extended on the basis of an \"Umowa o Pracę\" (Full-time Employment Contract). Apply only if you agree to these conditions.\nAbout us\nWe produce globally recognized brands and we grow the best business leaders in the industry. With a portfolio of trusted brands as diverse as ours, it is paramount our leaders can lead with courage the vast array of brands, categories and functions. We serve consumers around the world with one of the strongest portfolios of trusted, quality, leadership brands, including Always®, Ariel®, Gillette®, Head & Shoulders®, Herbal Essences®, Oral-B®, Pampers®, Pantene®, Tampax® and more. Our community includes operations in approximately 70 countries worldwide.\nVisit http://www.pg.com to know more.\nWe are an equal opportunity employer and value diversity at our company. We do not discriminate against individuals on the basis of race, color, gender, age, national origin, religion, sexual orientation, gender identity or expression, marital status, citizenship, disability, HIV/AIDS status, or any other legally protected factor.\nJob Schedule\nFull timeJob Number\nR000155626Job Segmentation\nExperienced Professionals","description_format":"text","description_chars":6865,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cleaning & Household Products","Baby Products","Personal Hygiene & Toiletries","Hair Care Products"],"lifecycle":[{"event":"open","at":"2026-08-21T00:00:00Z"}],"visa":[],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.527,"p_room":0.36,"age_days":66,"expected_fill_days":44,"reasons":["conf:17","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/pgcareers-senior-detection-engineer-ai-augumented","json_url":"https://alion.io/job/pgcareers-senior-detection-engineer-ai-augumented.json","meta":{"generated_at":"2026-10-27T00:51:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1131,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":871},"rest":"https://alion.io/mcp/rest/get_company?id=871"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpgcareers-senior-detection-engineer-ai-augumented"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpgcareers-senior-detection-engineer-ai-augumented"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpgcareers-senior-detection-engineer-ai-augumented"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/pgcareers-senior-detection-engineer-ai-augumented\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpgcareers-senior-detection-engineer-ai-augumented"}]}